Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/YWsuWp-wiotUOqONsLOIG6qv5Qc.roa
File: YWsuWp-wiotUOqONsLOIG6qv5Qc.roa (raw, json)
Hash identifier: 6AOfh7vJ9yqSODpJLgU65woCWFbenEIfQ8rQX2q18+E=
Subject key identifier: 61:6B:2E:5A:9F:B0:8A:8B:54:3A:A3:8D:B0:B3:88:1B:AA:AF:E5:07
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019424B3943B8BF2F4B75A65B6863D839F77
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/YWsuWp-wiotUOqONsLOIG6qv5Qc.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57588
IP address blocks: 194.39.228.0/24 maxlen: 24
194.39.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:94:3b:8b:f2:f4:b7:5a:65:b6:86:3d:83:9f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=616b2e5a9fb08a8b543aa38db0b3881baaafe507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:61:24:22:12:dc:3e:bb:2b:1b:04:8e:f4:
98:34:f9:fb:0f:1b:db:02:4a:d7:b8:61:aa:05:2e:
86:16:a3:6d:a2:1f:1b:b2:82:05:4a:d1:4e:cb:10:
8b:32:9c:a9:65:8d:bf:8a:4e:aa:97:3b:26:a8:12:
c3:0b:64:82:07:a3:dc:5b:53:55:18:15:54:46:13:
0f:bd:be:94:8f:5e:8a:37:61:d1:dc:3c:2c:be:ff:
84:91:3f:58:f0:8f:78:41:29:70:a4:f5:46:92:4b:
4b:5b:b4:81:e6:f5:58:9d:39:dd:c0:c8:bd:79:a2:
26:9d:4f:fd:16:80:ba:09:90:6f:38:01:52:f7:69:
87:ca:21:38:b6:2f:21:0b:7b:a5:41:23:11:5e:af:
8f:0b:a6:67:15:67:58:c0:4a:ae:eb:e0:46:0e:e8:
73:b8:23:c4:c2:06:2b:9c:92:4c:5d:27:1f:06:36:
78:b2:c7:82:1e:35:50:a5:08:b3:de:de:f3:43:d9:
92:d7:a8:7c:4c:9b:f0:12:5b:a9:6d:bd:89:ca:e7:
88:08:b1:95:bb:88:a9:ea:69:20:dc:f6:5b:b9:12:
2a:08:0b:c6:6a:a7:21:dc:4b:b5:fe:99:2c:af:a4:
8e:ca:a9:f6:97:f8:0a:3e:01:63:52:40:72:81:e4:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6B:2E:5A:9F:B0:8A:8B:54:3A:A3:8D:B0:B3:88:1B:AA:AF:E5:07
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/YWsuWp-wiotUOqONsLOIG6qv5Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.228.0/23
Signature Algorithm: sha256WithRSAEncryption
10:73:35:03:fb:8f:c4:00:fe:d0:f6:d7:91:0c:e7:9f:79:37:
ae:65:60:f9:3d:af:df:d6:45:64:72:c6:7c:f0:a7:bb:96:1e:
f1:0e:21:01:ea:3a:12:12:7a:a3:0b:1a:e1:b0:e8:98:2f:e4:
4c:4d:31:aa:76:f8:08:d3:87:37:ba:93:4b:6b:7a:95:e2:06:
8d:1f:8c:76:5e:46:ad:45:1f:d4:8c:45:88:c5:d1:52:78:f4:
2f:81:67:1d:84:67:05:be:1a:f8:ed:f4:2c:93:ff:97:85:01:
76:0f:7d:4c:c2:24:43:d9:a5:e8:4c:c6:2d:f9:7f:38:88:ee:
3c:4a:ed:6e:62:58:2c:ab:6a:c5:38:a9:b1:bc:47:5d:9f:e9:
d4:cf:86:64:36:3d:35:f2:42:59:ee:3b:3e:79:74:7d:2f:04:
f4:4d:2d:09:d0:74:23:ff:7a:4d:b4:4d:45:97:c5:47:f0:74:
8d:a3:c4:7e:66:69:4e:5c:50:41:ef:aa:e7:09:c9:21:50:8c:
c3:83:72:7b:3a:20:a5:2c:50:97:9b:4f:2e:dc:03:3f:02:a1:
d6:d5:7d:ab:36:36:95:d7:c5:7b:81:e7:67:c9:54:0b:73:94:
fc:df:1a:22:68:5c:bc:45:6c:e9:91:36:83:e5:81:c8:ba:63:
c1:54:20:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks5Q7i/L0t1pltoY9g593MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5
Y2UzM2EwHhcNMjUwMTAyMDE0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTZiMmU1YTlmYjA4YThiNTQzYWEzOGRiMGIzODgxYmFhYWZlNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteNhJCIS3D67KxsEjvSYNPn7Dxvb
AkrXuGGqBS6GFqNtoh8bsoIFStFOyxCLMpypZY2/ik6qlzsmqBLDC2SCB6PcW1NV
GBVURhMPvb6Uj16KN2HR3Dwsvv+EkT9Y8I94QSlwpPVGkktLW7SB5vVYnTndwMi9
eaImnU/9FoC6CZBvOAFS92mHyiE4ti8hC3ulQSMRXq+PC6ZnFWdYwEqu6+BGDuhz
uCPEwgYrnJJMXScfBjZ4sseCHjVQpQiz3t7zQ9mS16h8TJvwElupbb2JyueICLGV
u4ip6mkg3PZbuRIqCAvGaqch3Eu1/pksr6SOyqn2l/gKPgFjUkBygeRRLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGFrLlqfsIqLVDqjjbCziBuqr+UHMB8GA1UdIwQY
MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt
NjJiZTUzNDI1Njc2LzEvWVdzdVdwLXdpb3RVT3FPTnNMT0lHNnF2NVFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2
LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwifkMA0G
CSqGSIb3DQEBCwUAA4IBAQAQczUD+4/EAP7Q9teRDOefeTeuZWD5Pa/f1kVkcsZ8
8Ke7lh7xDiEB6joSEnqjCxrhsOiYL+RMTTGqdvgI04c3upNLa3qV4gaNH4x2Xkat
RR/UjEWIxdFSePQvgWcdhGcFvhr47fQsk/+XhQF2D31MwiRD2aXoTMYt+X84iO48
Su1uYlgsq2rFOKmxvEddn+nUz4ZkNj018kJZ7js+eXR9LwT0TS0J0HQj/3pNtE1F
l8VH8HSNo8R+ZmlOXFBB76rnCckhUIzDg3J7OiClLFCXm08u3AM/AqHW1X2rNjaV
18V7gednyVQLc5T83xoiaFy8RWzpkTaD5YHIumPBVCDn
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:41 2025 by rpki-client